ACE NANO (hereinafter referred to as the “Company”) establishes and discloses the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to promptly and smoothly handle related grievances.
Article 1. Purpose of Processing Personal Information
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
1. Website Membership Registration and Management
The Company processes personal information for the purposes of confirming the intention to register as a member, identifying and authenticating individuals for membership-based services, maintaining and managing membership status, verifying identity under the limited identity verification system, preventing unauthorized use of services, confirming the consent of a legal representative when processing personal information of children under the age of 14, sending notices and notifications, and handling grievances.
2. Provision of Goods or Services
The Company processes personal information for the purposes of delivering goods, providing services, sending contracts and invoices, providing content, providing customized services, verifying identity, verifying age, processing and settling payments, and collecting debts.
3. Handling Grievances
The Company processes personal information for the purposes of verifying the identity of complainants, confirming complaints, contacting and notifying individuals for fact-finding investigations, and notifying the results of processing.
Article 2. Processing and Retention Period of Personal Information
① The Company processes and retains personal information within the period of retention and use of personal information prescribed by law or within the period agreed upon by the data subject at the time of collection.
② The processing and retention periods for each type of personal information are as follows.
1. Website Membership Registration and Management: Until withdrawal from the business/organization website
However, in the following cases, personal information will be retained until the relevant reason has been resolved.
1) If an investigation or inquiry due to violation of relevant laws is ongoing, until the investigation or inquiry is completed.
2) If any creditor-debtor relationship remains due to website use, until the relevant creditor-debtor relationship is settled.
2. Provision of Goods or Services: Until the supply of goods or services is completed and payment and settlement are completed
However, in the following cases, personal information will be retained until the end of the relevant period.
1) Records related to labeling, advertising, contract details, performance of transactions, etc. under the Act on the Consumer Protection in Electronic Commerce, etc.
- Records on labeling and advertising: 6 months
- Records on contracts or withdrawal of offers, payment, and supply of goods: 5 years
- Records on consumer complaints or dispute resolution: 3 years
2) Retention of communication confirmation data under Article 41 of the Protection of Communications Secrets Act
- Date and time of telecommunications by subscribers, start and end time, subscriber number of the other party, frequency of use, and location tracking data of base stations: 1 year
- Computer communication, internet log records, and access location tracking data: 3 months
Article 3. Provision of Personal Information to Third Parties
① The Company processes the personal information of data subjects only within the scope specified in Article 1, Purpose of Processing Personal Information, and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or as specially prescribed by law. In all other cases, the Company does not provide personal information to third parties.
② For the smooth provision of services, the Company may provide personal information to third parties within the minimum necessary scope after obtaining the consent of the data subject in accordance with Article 17, Paragraph 1, Item 1 of the Personal Information Protection Act.
- Recipient of personal information:
- Purpose of use by the recipient:
- Personal information items provided:
- Retention and use period by the recipient:
Article 4. Entrustment of Personal Information Processing
① The Company entrusts personal information processing tasks as follows for smooth personal information processing.
- Details of entrusted tasks
- Trustee: Imweb Corp.
- Details of entrusted tasks: Provision of shopping mall hosting service systems, mobile app services, marketing services, additional and affiliated services, and agency services for sending AlimTalk, FriendTalk, and text messages.
- Trustee: OOO PG
- Details of entrusted tasks: Payment and escrow services.
- Trustee: OOO Delivery Company
- Details of entrusted tasks: Product delivery services.
- Trustee: OOO Customer Center
- Details of entrusted tasks: Customer consultation services.
- Trustee: OOO
- Details of entrusted tasks: Identity verification services.
- Subcontractors
- Subcontractor: Imweb Corp. → Infobip Ltd.
- Details of entrusted tasks: Sending text messages and KakaoTalk AlimTalk messages.
- Subcontractor: Imweb Corp. → LUNASOFT Co., Ltd.
- Details of entrusted tasks: Sending text messages, KakaoTalk AlimTalk messages, and FriendTalk messages.
② When entering into an entrustment contract, the Company specifies matters related to the prohibition of personal information processing for purposes other than the entrusted work, technical and managerial protection measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages in documents such as contracts in accordance with Article 25 of the Personal Information Protection Act. The Company also supervises whether the trustee safely processes personal information.
③ If the details of the entrusted work or the trustee changes, the Company will disclose such changes without delay through this Privacy Policy.
Article 5. Rights of Data Subjects and Legal Representatives and Methods of Exercising Rights
① Data subjects may exercise the following personal information protection rights against the Company at any time.
1. Request to access personal information
2. Request correction in case of errors, etc.
3. Request deletion
4. Request suspension of processing
② The rights under Paragraph 1 may be exercised against the Company in writing, by phone, email, fax, etc., and the Company will take action without delay.
③ If a data subject requests correction or deletion of errors in personal information, the Company will not use or provide the relevant personal information until the correction or deletion is completed.
④ The rights under Paragraph 1 may be exercised through a legal representative of the data subject or an authorized representative. In this case, a power of attorney must be submitted in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act.
⑤ Data subjects must not infringe upon the personal information or privacy of themselves or others processed by the Company in violation of the Personal Information Protection Act and other related laws.
Article 6. Personal Information Items Processed
The Company processes the following personal information items.
1. Website Membership Registration and Management
Required items:
Optional items:
2. Provision of Goods or Services
Required items:
Optional items:
Article 7. Destruction of Personal Information
① The Company destroys personal information without delay when the personal information becomes unnecessary due to the expiration of the retention period, achievement of the processing purpose, etc.
② If personal information must continue to be retained in accordance with other laws despite the expiration of the retention period agreed upon by the data subject or the achievement of the processing purpose, the Company transfers the personal information to a separate database or stores it in a different location.
③ The procedures and methods for destroying personal information are as follows.
1. Destruction Procedure
The Company selects personal information for which a reason for destruction has occurred and destroys the personal information with the approval of the Company’s Personal Information Protection Officer.
2. Destruction Method
The Company destroys personal information recorded and stored in electronic file format in a manner that prevents the records from being restored. Personal information recorded and stored in paper documents is shredded or incinerated.
Article 8. Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the security of personal information.
1. Managerial measures: Establishment and implementation of an internal management plan, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc.
3. Physical measures: Access control to computer rooms, data storage rooms, etc.
Article 9. Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
① The Company uses cookies that store and frequently retrieve user information in order to provide individualized customized services to users.
② Cookies are small amounts of information sent by the server used to operate the website to the user’s computer browser and are stored on the user’s PC or mobile device.
③ Data subjects may set their web browser options to allow or block cookies. However, if cookie storage is refused, difficulties may arise in using customized services.
▶ Allowing or Blocking Cookies in Web Browsers
- Chrome: Web browser settings > Privacy and security > Delete browsing data
- Edge: Web browser settings > Cookies and site permissions > Manage and delete cookies and site data
▶ Allowing or Blocking Cookies in Mobile Browsers
- Chrome: Mobile browser settings > Privacy and security > Delete browsing data
- Safari: Mobile device settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Mobile browser settings > Browsing history > Delete browsing history
④ In the course of using services, the Company collects and uses information such as the user’s visit and usage patterns for each service and website, popular search terms, and secure access status in order to provide optimized information to users.
Article 10. Personal Information Protection Officer
① The Company designates the following Personal Information Protection Officer to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing.
▶ Personal Information Protection Officer
Name: Jeon Hye-rim
Contact: 070.7868.8920
※ You will be connected to the department in charge of personal information protection.
② Data subjects may contact the Personal Information Protection Officer and the relevant department regarding all personal information protection-related inquiries, complaints, and requests for damage relief that occur while using the Company’s services or business. The Company will respond to and process inquiries from data subjects without delay.
Article 11. Request to Access Personal Information
Data subjects may request access to personal information pursuant to Article 35 of the Personal Information Protection Act through the department below. The Company will make efforts to ensure that requests to access personal information are handled promptly.
▶ Department for Receiving and Processing Requests to Access Personal Information
Name: Jeon Hye-rim
Contact: 070.7868.8920
Article 12. Remedies for Infringement of Rights
Data subjects may contact the following organizations for damage relief, consultation, etc. regarding personal information infringement.
1. Personal Information Dispute Mediation Committee: 1833-6972 without area code (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 without area code (privacy.kisa.or.kr)
3. Supreme Prosecutors’ Office: 1301 without area code (www.spo.go.kr)
4. National Police Agency: 182 without area code (ecrm.police.go.kr/minwon/main)
Article 13. Enforcement and Amendment of the Privacy Policy
This Privacy Policy is effective from March 3, 2026.
